Senior Security Engineer, Exploits, Google Threat Intelligence Group

Google; Georgia; Remote; USD 174,000 - 252,000; Full time

Benefits offered by this job

Equity

Bonus target

Job summary

Google Security Engineering team seeks a skilled analyst to advance threat research and build robust defenses for Google Cloud, working with software and security teams to proactively identify and mitigate threats.

You will lead research on risk groups, model risk activity, and produce actionable intelligence while mentoring junior engineers and collaborating on innovative exploit mitigations.

Qualifications

• Bachelor's degree or equivalent practical experience.
• 5 years of experience with security assessments or security design reviews or threat modeling.
• 5 years of experience with security engineering, computer and network security and security protocols.
• 5 years of coding experience in one or more general purpose languages.
• 1 year of experience leading teams in a technical capacity or leading technical risk analysis in an enterprise environment.

Responsibilities

• Own, prioritize, and drive the tracking of complex, threat actors and associated research projects.
• Lead complex technical analyses, modeling threat activity, tactics, techniques, and procedures (TTPs), and indicators of compromise (IOCs) across internal platforms (mGraph).
• Create and deploy detection signatures to maintain visibility over threat actors and close security gaps.
• Produce polished, high-quality technical intelligence documentation and actor profiles for stakeholders.
• Influence technical direction, mentor junior engineers, and collaborate with cross-functional teams to support threat disruption.

Skills

Security assessments

Threat modeling

Security engineering

Coding

Education

Bachelor's degree or equivalent

Tools

VirusTotal

SIEMs

Job description

In most instances, this position requires in-person interviews as part of the hiring process.

Note: By applying to this position you will have an opportunity to share your preferred working location from the following:

Remote locations: Virginia, USA; Florida, USA; Georgia, USA; Maine, USA; North Carolina, USA; New York, USA.

Minimum qualifications

• Bachelor's degree or equivalent practical experience.
• 5 years of experience with security assessments or security design reviews or threat modeling.
• 5 years of experience with security engineering, computer and network security and security protocols.
• 5 years of coding experience in one or more general purpose languages.
• 1 year of experience leading teams in a technical capacity or leading technical risk analysis in an enterprise environment.

Preferred qualifications

• Experience with threat intelligence platforms and tools (e.g., VirusTotal, SIEMs).
• Proficiency in analyzing and correlating data from sources to track threat activity.
• Knowledge of Android and Chrome security and internals.
• Ability to lead complex threat research projects separately.
• Excellent malware analysis, reverse engineering, or vulnerability analysis skills.

About The Job

Our Security team works to create and maintain the safest operating environment for Google's users and developers. Security Engineers work with network equipment and actively monitor our systems for attacks and intrusions. In this role, you will also work with software engineers to proactively identify and fix security flaws and vulnerabilities.

As a Security Engineer on our team, you will conduct in-depth research on risk groups, their tactics, techniques, and procedures (TTPs), and the malware they employ. You will utilize internal intelligence platforms to model risk activity and generate insights. This role involves close collaboration with various security teams across Google to develop and implement effective countermeasures, contributing directly to risk disruption and enhancing our collective security posture. You will lead projects, mentor others, and apply your passion for security research.

Google Cloud accelerates every organization’s ability to digitally transform its business and industry. We deliver enterprise-grade solutions that leverage Google’s technology, and tools that help developers build more sustainably. Customers in more than 200 countries and territories turn to Google Cloud as its trusted partner to enable growth and solve their most critical business problems.Individual pay is determined by factors including job-related skills, experience, and relevant education or training.

US: $174000 - $252000 (USD) + 15% bonus target + equity + benefits

Responsibilities

Learn more about benefits at Google .

• Own, prioritize, and drive the tracking of complex, threat actors and associated research projects.
• Lead complex technical analyses, modeling threat activity, tactics, techniques, and procedures (TTPs), and indicators of compromise (IOCs) across internal platforms (mGraph).
• Create and deploy detection signatures (autoqueries, Watchtower rules) to maintain visibility over threat actors and assist in closing security gaps.
• Produce polished, high-quality technical intelligence documentation and actor profiles to deliver actionable insights to internal and external stakeholders.
• Influence technical direction within your scope, mentor junior engineers, and collaborate with cross-functional Google teams to support threat disruption efforts. Collaborate with security engineers and product teams in designing innovative exploit mitigations.

Google is proud to be an equal opportunity workplace and is an affirmative action employer. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or Veteran status. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. See also Google's EEO Policy and EEO is the Law. If you have a disability or special need that requires accommodation, please let us know by completing our Accommodations for Applicants form .